@daw At least, that's the experience with # / # / # / # The whole security process ( # / # and # ) needs to be surfaced in an easier way. And browser vendors making it harder to manually approve # certs is NOT the right direction, IMO, since self-verifying is better than depending on centralized and corrupt # to properly verify.